Daily IoCs for 2020-12-07

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2020-12-07                                      #
#     Total:    166 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 36                                #
#              - AveMaria: 2                                   #
#              - CrySIS: 8                                     #
#              - Dridex: 4                                     #
#              - FormBook: 2                                   #
#              - Jupyter: 8                                    #
#              - Loki: 6                                       #
#              - Makop: 2                                      #
#              - Matrix: 4                                     #
#              - Meterpreter Xmrig: 12                         #
#              - Nanocore: 7                                   #
#              - Phishing: 27                                  #
#              - Phobos: 2                                     #
#              - Qbot: 6                                       #
#              - Quasar: 1                                     #
#              - Remcos: 6                                     #
#              - Spam: 5                                       #
#              - Unknown Malware: 19                           #
#              - Xorist: 4                                     #
#              - njRat: 5                                      #
#                                                              #
################################################################


AgentTesla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AveMaria
749fd61c1598807158cf7c49f8fb021f9fb1c5f072e8f106c6f0aa7f6510e85d
e95c7ffcff4c321e7f15d04c7a91076ef94fdecf53b02507f1e7434467b4f817

CrySIS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Dridex
ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81e
e5cc7cb98d24d1186af5bd54de2c0ad8ff9ab2e18b2eac426ea00de7b4844401
158337b1a8a32977bb008eb60ee1c15e5db749f7f3b90cf83960cc8339e8d320
01020b0e9a19a67c53ceb2a3da055470fe1fd49b103ebecd4e3ca41639ae147e

FormBook
e01cfde284baf9742419669d25007c6db1da8a5895b8547c53b51113ee01f53d
a50ab236b111aec0f61ef05f25b61cfa7a16d116f705945577a80bac9874c51e

Jupyter
61ad7b47a7ccab30f0ca3757f594205e83a51ea3bdd98c09b2b29339bd00ac2d
c6c0a1ee5f67383b1be65327dd54bb1ee4ef64b62b6444c299f55e8377fb80b0
bd510297bbac9cd2241a0b82b71692eeab55c7d0001ffa4911caf613f9367cd5
03033055fc1e504639684e4eebb3ee961642c2be12e606a4165bcafe507d1a24
07af266ede1bbcae7f433b746e2411e47c6e9e1ce504a10a3158510c7c9ecfd8
18a589c62cc5210faf0b036c4f9542e662afde9cf18d89898c35b856b4b35338
d14f7cd75c858c1cd8a55c34c97e9ecbfc3b234ad12dfbed8b4f58511d03303d
3147cd2ee6938d50d2cdc7e157ad1125de2229bb35454cbde502746d6a36154d

Loki
45db04125ffed825431a746e397c7c1fb4fb3ccf8768701d791847df9e9d09ee
1c6e9570729c4d4d1700f1a3b936308966a5164c1959157da7904f5de40a9f18
711222f6deaec2776e6afa177e832585cff67d17b06eb4be9ede7fa93903790d
030d7031dc02ec7766d476e96b72e5a348eab8814d9c2cb04c33e75071020440
aab961236ad8e1f537851c67b1ad05724c6618c62c80ce9850b48b2127474582
ca6c0702ac45a81d1971f4411e553a85a5372c21d38638e5af8322f5605120f3

Makop
60b9c70fa114f3b1d2c9fc66930ac8405237750664130d00db6d0a65bf6be78f
4563abb9d806132249083fe8254fac79a54c2d8d7d3bfe0c313f01976bc6d90f

Matrix
3a597442f34e7152c58866bb1a14ac03dd7ff2b59834fb93e8f44390c7b5caad
226e17cfbb96351f5685baa039c1c4d2cb4d3d94172ea3bb0cfb7238a91abaf6
ac0dd1930586d710fce1dc1ef88b2ebcbd0ec21feb3c9d453b8d3d127b7060be
66448fe45bdb015c87688470a2e98f1fdef839906a517a9c37da1d96b497b53f

Meterpreter Xmrig
18dd3362d7712f9038dbaf6cfab46283c05d64e0f427ce804db686d35e5e6e6c
2888b9f6248443dedb1eee3151e61c48bec53768d0137f121d65daff9579c29c
952b6e0b3b60b25837476568f202546d9c76aef7db5756f4e358f291fe43b14b
23188eb4e3bd8a6a1014990725c97976ea35acaa3f51bd657a05452e3fdbbf5a
c3ba2d27c31e46fa30805cdc5a19ef3c3638e8b2076997730dc3f5eb7cc28981
e7bc5b0d9a6a5e40cfc4286c7dc76f273f9f8a48af37516e2dfb5db538177241
c686b7327f0c7378179ea15c19204ede0917325c23fd943cf741a16135578f50
4d9351950ea6915836706bc5e83b9ff556b6f336e07a2d53625f802e016d5c7f
af10bd0bd8d8fb38192279c3a90248f205a4ea4d84ce5b900f9239a256d33efe
e63e98f97a9d1cf105b8054ace02edd7e389048db2f75e614d8c39fe8c1efb27
e10401c73ff04f97ae5cd0816538ee25776533418eee0c5a2c629f8b5a245a4a
25a80cdb2210d1d658b56d300add4bf0c31887620ec3d051623eb5bf74645dfb

Nanocore
9b50633cf46e7974a816c1a96dc5eb1b15bd51653e548822039849b98c120548
bdd6660a13a447a54579212db05e971b87d2c2b986ecdd6565d7c47d75d4701f
a56b99038d2ad48cc2f796996e0a96ed85c3ef5c54c9999034da47ed102c32c5
dd43d3769237922b4c957d5bd1fdbe1a361138797681452eef77f50e97535372
d1a7dbccc9ef6474e2274c926802f43a73b8794a1b087a42380b14811239b33a
c9b83ad4c09c49f6ea16888afde265066422903658db7dccd6968798b9867bdb
fe6df585f0aa83071942d70600fdc93042c2bb46d7b6e66c28c99dca75b3f16d

Phishing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Phobos
479c3005e2749d84404f57aede83a3acd2b746371f8aed9e0bb3a637f4ef50ab
dce8a22fe3db93a87bb5323464eb3dd07a2dd6da33380551df601fdb764e9390

Qbot
4a7854b0570d40847651b4c993bdc12cced73c5999dfee8ea0932ab53a61ebe1
cf7aba52364aefc392bb241ffe6fcc758bc8127ba7b8e82f7c170d7857ef422b
7e595044d06ce83bcb8414a97b23523d37a0f9ce0d11b3e34ef9bfd4b3422bc1
89f9d5e5c806f33e5f1c5c6a1fc8401fb8fd5514f40589c49bd8ee40ad746d98
0bc51a8278b4dc539d8c937d075ecba4c65d10b9a1006d912bb8ac7e357a5d60
a136e164eab8ed17bf52655682aabdacd90df1081d7ff0c421bc60f8ada9ba81

Quasar
602ed2feb3987749158fbee3e5812e60dffc7acd44995516f6976310a91c3d64

Remcos
c86bfa22c06ac6631715fd360422d51de20e37f2db8e645059bbba311d45a389
134a6f4d0867df4570a3c569a0a5be3cca92537e8f27ff169e89c3eefa59fe6b
d738d1db6efc59be58256f51faab6ac3a70375ca9fbbefd35fd821c7a3769ac2
fca5ad5552dbd45e52bfdac5314d3f77364e2b585551b92310b6f2b646c5ff1a
ee913199599bd6a42f59eb186e30b1afd38d9ef47de379ddbd534419eb92fa94
cc8de0f68549d84a62dcd11df6625b2bfe08a6cfaea102f4710e28969a60f689

Spam
3e1a26c78363fbc6a7c604510fe0a60171c3966916fe75b87c59c8bf087630e4
5153a694a02644b19db235eb878e17f3734785b928fb4f1c8c5859a0e454dd77
b77afdc567eb6c05603fa92597e587a33522b83428899254f8215074f98c4be4
b277cbdf3a08e58384c407b26f1a71896e00eb2664b23abfca0387b92d5e6dcc
4ee69ef3665352a44ad1f40f5b8f1fd199f1868052c9dceb0a9b9806789d41d7

Unknown Malware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Xorist
1e2325130cad9527d5472e59dadcf9b391449ab4456ffa7353a885023444b718
8054325668510fed20f63a2956f202e7a45649a968f146135edbbc631fec0d2d
0740e9e901f109d19490fe85d1fd789c0a00364759f3261cde6c506bb5c94fd1
193a4d5502101fcc146c0d497af434925b649c85f89cca1d06bcd2b7253f0615

njRat
8be74931c91ceda8361da1a5077d04beb02aac1d91b8832b041c0822153c01a7
20b9ec5a56219d5254b07c32c45c34eac8017ed9cb8335eb2c6f5312b9ea44ff
9154dc9022229494064223cb26cdae86402f11ce3d0ff3cc752010364a2686f2
33a8e66d3229af2554c25b78aade10d3348f3a8fb3b4334e082f4f52ed3f6bda
3927718f2f1abcdd057258f17021aaf24fa8339f160c6d47ded82aef94700db6